Operationalizing Zero Trust: Securing Containers in Runtime